Privacy Policy

Introduction

banthenensa ("we," "us," or "our") is committed to protecting the privacy and personal data of our residents, their families, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with Thailand's Personal Data Protection Act (PDPA) and international best practices.

By using our services or website, you consent to the practices described in this policy. If you have any questions or concerns, please contact us at [email protected].

Information We Collect

Personal Information

When you inquire about our services or become a resident, we collect:

• Full name, date of birth, and contact information (email, phone, address)
• Health information relevant to providing appropriate care and support
• Dietary preferences, allergies, and medical conditions
• Emergency contact details and family member information
• Payment and billing information for service fees
• Identification documents as required by Thai law

Website Usage Data

When you visit our website, we automatically collect:

• IP address, browser type, and device information
• Pages visited, time spent on pages, and navigation patterns
• Referring website and search terms used to find us
• Cookie data (see our Cookie Policy for details)

Communication Records

We maintain records of communications including emails, phone calls, and in-person conversations for quality assurance and service improvement purposes.

How We Use Your Information

Service Delivery

• Providing residential care services tailored to individual needs
• Coordinating meals, activities, and daily living support
• Communicating with family members and emergency contacts
• Managing room assignments and facility access
• Processing payments and maintaining billing records

Health and Safety

• Monitoring resident wellbeing and responding to health needs
• Coordinating with healthcare providers when necessary
• Maintaining emergency contact information
• Ensuring dietary requirements and restrictions are met

Communication

• Responding to inquiries and providing requested information
• Sending service updates and community announcements
• Providing family members with resident status updates
• Marketing communications (with consent, which can be withdrawn)

Legal Compliance

• Meeting requirements under Thai law and regulations
• Responding to legal requests or court orders
• Protecting our legal rights and interests

Legal Basis for Processing

Under the PDPA, we process personal data based on:

• Consent: You have provided explicit consent for specific processing activities
• Contract: Processing is necessary to fulfill our service agreement with you
• Legal Obligation: Processing is required to comply with Thai laws and regulations
• Legitimate Interest: Processing is necessary for our business operations while respecting your rights

Data Sharing and Disclosure

We do not sell your personal information. We share data only in the following circumstances:

Service Providers

We work with third-party providers who assist in service delivery:

• Healthcare providers and medical professionals for resident care coordination
• Payment processors for billing and financial transactions
• IT service providers for website hosting and data storage
• Activity coordinators and external program facilitators

All service providers are contractually required to maintain data confidentiality and use information only for specified purposes.

Legal Requirements

We may disclose information when required by law, court order, or government authority, or when necessary to protect health and safety in emergency situations.

Family Members

With resident consent, we share relevant information with designated family members and emergency contacts to keep them informed about wellbeing and care.

Data Security

We implement comprehensive security measures to protect personal information:

• Encryption of data during transmission and storage
• Secure servers with restricted physical and digital access
• Regular security audits and vulnerability assessments
• Staff training on data protection and confidentiality
• Access controls limiting data access to authorized personnel only
• Secure backup systems to prevent data loss

While we take reasonable precautions, no system is completely secure. We continuously work to improve our security practices and promptly address any identified vulnerabilities.

Data Retention

We retain personal information for specific periods based on legal requirements and business needs:

• Resident Records: Maintained for 10 years after service termination, as required by Thai healthcare regulations
• Financial Records: Retained for 7 years in accordance with Thai accounting and tax laws
• Marketing Communications: Maintained until consent is withdrawn or the relationship ends
• Website Analytics: Typically retained for 26 months

After retention periods expire, we securely delete or anonymize personal data so it can no longer identify individuals.

Your Rights

Under the PDPA, you have the following rights regarding your personal data:

• Right to Access: Request copies of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing of your data for specific purposes
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Lodge a Complaint: File a complaint with the Thailand Personal Data Protection Committee

To exercise these rights, contact us at [email protected]. We will respond within 30 days of receiving a valid request.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve user experience and analyze website traffic. For detailed information about our cookie practices, please see our Cookie Policy.

You can manage cookie preferences through your browser settings or our cookie consent tool on the website.

Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Children's Privacy

Our services are designed for senior adults, and we do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected such information, we will promptly delete it.

International Data Transfers

Your personal data is primarily processed and stored within Thailand. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with the PDPA and applicable international standards.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the revised policy on our website
• Notify current residents and active service users via email or written notice

We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: